I've been talking about how on-device ML models may be used by third party apps to profile users' data even when end-to-end encrypted since 2019.
I'd previously written two articles detailing how this may be done. I conducted experiments to show how efficient and silent this profiling could be. Read these on my blog.
Part 1: Encrypted, But Not Invisible: How Apps Could Use On-Device ML to Profile You
Part 2: On-Device LLMs & Your Encrypted Data: The Profiling Risk Amplified
In the light of the latest WhatsApp lawsuit, I revisited this. Read more below.
Part 3: The WhatsApp Lawsuit and a Tangent on What's Technically Possible